Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

classic Classic list List threaded Threaded
85 messages Options
12345
Reply | Threaded
Open this post in threaded view
|

Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
This post was updated on .
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
great work! I need Azure MFA with Guacd so I'll be testing this out. Will
provide feedback when I do.

One question, how did you confirm radius wont work with groups? Can I ask
what you tried?



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

Robert Dinse

      The people who have this working, what operating system(s) are you
running it on?

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
  Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
    Knowledgeable human assistance, not telephone trees or script readers.
  See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

On Tue, 19 Feb 2019, PlayerOne wrote:

> Date: Tue, 19 Feb 2019 23:03:55 -0600 (CST)
> From: PlayerOne <[hidden email]>
> Reply-To: [hidden email]
> To: [hidden email]
> Subject: Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux
>     newbies
>
> great work! I need Azure MFA with Guacd so I'll be testing this out. Will
> provide feedback when I do.
>
> One question, how did you confirm radius wont work with groups? Can I ask
> what you tried?
>
>
>
> --
> Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
>
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
This post was updated on .
In reply to this post by PlayerOne
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

vnick
In reply to this post by Robert Dinse


On Wed, Feb 20, 2019 at 12:11 AM Robert Dinse <[hidden email]> wrote:

      The people who have this working, what operating system(s) are you
running it on?


I generally use CentOS7 for my Guacamole testing/development and production environments.  I've tested some with Ubuntu 16.x for some of the JIRA issues that have popped up.  Don't think I've done anything with Ubuntu 18.x, yet.

Regards,
Nick 
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

Kamal Ezzaki
Centos 7 For Guacamole 
Freeradius Ubuntu 18 
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

Kamal Ezzaki
it's not an issue i think it's just something i must do with the configuration because my guacamole check first the database than go to radius , but i want guacamole to check users in radius, if the user existe than he complete with the database , if not PRINT incorrect  
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
In reply to this post by Robert Dinse
I'm currently installing this on CentOS 7, the latest download available.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
In reply to this post by drhy
Thank you David, I did actually catch that in the other thread, but thank you
again for keeping things neat and tidy by updating your posts here. It's
unbelievably annoying coming across those kind of dead end threads!




--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

vnick
In reply to this post by drhy
On Wed, Feb 20, 2019 at 3:44 PM drhy <[hidden email]> wrote:
Hi,
If you look at the script you'll see that it changes the name of the
Authentication Providers slightly. The Providers are loaded and executed by
Guacamole in alphanumeric sequence, so renaming is needed to ensure Radius
is loaded before MySQL.
-David


Yes, because of how modules are loaded and how authentication errors are handled, if you're using RADIUS to do 2-Factor authentication (Challenge/Response), you'll need to make sure that module is loaded and evaluated, first, so that authentication succeeds before the JDBC module is queried.  You should still be able to assign permissions from the JDBC module to RADIUS-authenticated users.

-Nick 
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
In reply to this post by drhy
David, I'm at the point in your guide where I've just rebooted after
permitting java to listen on privileged ports. Tomcat seems to not want to
start now, I get this error:

root@GUACA01/opt systemctl status tomcat.service
● tomcat.service - Apache Tomcat Web Application Container
   Loaded: loaded (/etc/systemd/system/tomcat.service; enabled; vendor
preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Thu
2019-02-21 02:34:56 GMT; 8s ago
  Process: 29904 ExecStop=/opt/tomcat/latest/bin/shutdown.sh (code=exited,
status=1/FAILURE)
  Process: 29893 ExecStart=/opt/tomcat/latest/bin/startup.sh (code=exited,
status=0/SUCCESS)
 Main PID: 29901 (code=exited, status=127)

Feb 21 02:34:56 AKGUACA01.group.abercrombiekent.local systemd[1]: Unit
tomcat.service entered failed state.
Feb 21 02:34:56 AKGUACA01.group.abercrombiekent.local systemd[1]:
tomcat.service failed.
root@AKGUACA01/opt


I've followed every step in your guide except for firewall cmd's, just
because I don't need to do that yet.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
I managed to fix it, although it did run this command with no errors
'./configure
--with-java-home=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.191.b12-1.el7_6.x86_64/'
didn't apply the java-home. I manually updated it in
/etc/systemd/system/tomcat.service and now tomcat starts ok.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
This post was updated on .
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
Hi David, Yes I did that's right. I've come across another problem, I hope
you can help. I've built a VM twice now on the Maven step thinking I may
have done something wrong, just a base CentOS 7 install. I've run the maven
commands and both times come up with this error.

[INFO]
------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] guacamole-common .................................. FAILURE [13.733s]
[INFO] guacamole-ext ..................................... SKIPPED
[INFO] guacamole-common-js ............................... SKIPPED
[INFO] guacamole ......................................... SKIPPED
[INFO] guacamole-auth-cas ................................ SKIPPED
[INFO] guacamole-auth-duo ................................ SKIPPED
[INFO] guacamole-auth-header ............................. SKIPPED
[INFO] guacamole-auth-jdbc ............................... SKIPPED
[INFO] guacamole-auth-jdbc-base .......................... SKIPPED
[INFO] guacamole-auth-jdbc-mysql ......................... SKIPPED
[INFO] guacamole-auth-jdbc-postgresql .................... SKIPPED
[INFO] guacamole-auth-jdbc-sqlserver ..................... SKIPPED
[INFO] guacamole-auth-jdbc-dist .......................... SKIPPED
[INFO] guacamole-auth-ldap ............................... SKIPPED
[INFO] guacamole-auth-openid ............................. SKIPPED
[INFO] guacamole-auth-quickconnect ....................... SKIPPED
[INFO] guacamole-auth-totp ............................... SKIPPED
[INFO] guacamole-example ................................. SKIPPED
[INFO] guacamole-playback-example ........................ SKIPPED
[INFO] guacamole-auth-radius ............................. SKIPPED
[INFO] guacamole-client .................................. SKIPPED
[INFO]
------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO]
------------------------------------------------------------------------
[INFO] Total time: 14.099s
[INFO] Finished at: Thu Feb 21 04:42:10 GMT 2019
[INFO] Final Memory: 19M/309M
[INFO]
------------------------------------------------------------------------
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-surefire-plugin:3.                                                                            
0.0-M1:test (default-test) on project guacamole-common: Execution
default-test o                                                                            
f goal org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M1:test failed:
Unab                                                                            
le to load the mojo 'test' (or one of its required components) from the
plugin '                                                                            
org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M1':
com.google.inject.Prov                                                                            
isionException: Guice provision errors:
[ERROR]
[ERROR] 1) No implementation for
org.codehaus.plexus.languages.java.jpms.Locatio                                                                            
nManager was bound.
[ERROR] while locating org.apache.maven.plugin.surefire.SurefirePlugin
[ERROR] at
ClassRealm[plugin>org.apache.maven.plugins:maven-surefire-plugin:3.0.                                                                            
0-M1, parent: sun.misc.Launcher$AppClassLoader@7852e922]
[ERROR] while locating org.apache.maven.plugin.Mojo annotated with
@com.google.i                                                                            
nject.name.Named(value=org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M1:t                                                                            
est)
[ERROR]
[ERROR] 1 error
[ERROR] role: org.apache.maven.plugin.Mojo
[ERROR] roleHint:
org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M1:test
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
swit                                                                            
ch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
rea                                                                            
d the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/PluginContaine                                                                           
rException
[root@maven guacamole-client-1.0.0]#




--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
Hi David, yes it does contain that line.

I tried the skiptests but that also failed. I'll start working my way
through these files. Thanks for the help.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
In reply to this post by drhy
Ok that all went well, I just need to do the Windows MFA/Radius side now. I
see your notes in your file, could you elaborate a little more on what needs
to be done please? Is this where I need to match AD User/Group Objects with
the User/Group objects in MySql?



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

drhy
In reply to this post by PlayerOne
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

PlayerOne
Thank you David! Reposting this below in case you missed it above.

"Ok that all went well, I just need to do the Windows MFA/Radius side now. I
see your notes in your file, could you elaborate a little more on what needs
to be done please? Is this where I need to match AD User/Group Objects with
the User/Group objects in MySql?"





--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
12345